assign a default role to new ldap users in the database